update user roles